StackRadar

CVE-2026-84445

High

Advisory

Published 8 Sept 2026In the index since 9 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,310
of 17,803 indexed, latest versions
Container images
2,803
deployed by those charts
Fix available
1 of 1
affected package

gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers

Carried by container images the latest versions of 2,310 of 17,803 indexed charts deploy, on 2,803 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+117 more1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e2,803
OSV records
GHSA-2v4p-qf9q-27wj
Also known as
GO-2026-6443
Trending
Rank 10 in indexed charts, since 9 Sept 2026. See the ranking →

Charts affected

2,310 by stars
ChartLatestAffected imagesRadar Score
opentelemetry-ebpfopentelemetry-helmOfficialVerified publisher0.1.71 of 4See more

opentelemetry-ebpf opentelemetry-helm 0.1.7

1 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
otel/opentelemetry-ebpf-k8s-watcher:v0.10.263a0d1dd2cac
google.golang.org/grpc@v1.53.0
1.82.2

Open the chart page →

2,582
oesopsmxVerified publisher4.0.324 of 25See more

oes opsmx 4.0.32

4 of the 25 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2020-11-25T23-04-07Zbf85c57cdfcc
google.golang.org/grpc@v1.26.0
1.82.2
minio/minio:RELEASE.2020-12-03T05-49-24Z053f103f4894
google.golang.org/grpc@v1.26.0
1.82.2
quay.io/opsmxpublic/forwarder-controller:v3.5.7f0c5bebaec96
google.golang.org/grpc@v1.49.0
1.82.2
quay.io/opsmxpublic/opa:1.12.084fb1af7401c
google.golang.org/grpc@v1.77.0
1.82.2

Open the chart page →

108,589
pacto-operatorpacto-operatorOfficialVerified publisher5.4.11 of 1See more

pacto-operator pacto-operator 5.4.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/trianalab/pacto/operator:5.4.12af8d2357c86
google.golang.org/grpc@v1.83.1
1.83.2

Open the chart page →

23
ipfs-clusterparadeum-teamVerified publisher0.0.192 of 2See more

ipfs-cluster paradeum-team 0.0.19

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ipfs/go-ipfs:v0.13.117259397f587
google.golang.org/grpc@v1.46.0
1.82.2
ipfs/ipfs-cluster:1.0.21511f6d57994
google.golang.org/grpc@v1.45.0
1.82.2

Open the chart page →

3,783
psmdb-operatorpercona1.23.11 of 1See more

psmdb-operator percona 1.23.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
percona/percona-server-mongodb-operator:1.23.0feaff989e253
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

281
permifypermifyVerified publisher0.5.01 of 1See more

permify permify 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
google.golang.org/grpc@v1.64.0
1.82.2

Open the chart page →

1,016
persespersesOfficialVerified publisher0.23.21 of 1See more

perses perses 0.23.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
persesdev/perses:v0.54.0a0e34ddaf9d7
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

147
platzioplatz-ioVerified publisher0.6.51 of 2See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
platzio/backend:v0.6.5d5e5972f344b
google.golang.org/grpc@v1.68.1
1.82.2

Open the chart page →

2,903
plecopleco0.24.01 of 1See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
google.golang.org/grpc@v1.58.3
1.82.2

Open the chart page →

1,356
pomeriumpomerium34.0.11 of 1See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
pomerium/pomerium:v0.22.19c69b10a2126
google.golang.org/grpc@v1.54.0
1.82.2

Open the chart page →

1,949
kube-prometheus-stackprometheus-worawutchan12.8.01 of 6See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

1 of the 6 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
grafana/grafana:7.2.1733842cca5bd
google.golang.org/grpc@v1.30.0
1.82.2

Open the chart page →

12,134
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.1b5210df46c05
google.golang.org/grpc@v1.70.0
1.82.2

Open the chart page →

5,440
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-07-23T15-54-02Zd249d1fb6966
google.golang.org/grpc@v1.72.0
1.82.2

Open the chart page →

13,839
backrestrobertobochetVerified publisher0.7.01 of 1See more

backrest robertobochet 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
garethgeorge/backrest:v1.14.1b85297975428
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

869
rqliterqliteOfficialVerified publisher2.0.01 of 1See more

rqlite rqlite 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
rqlite/rqlite:9.1.37b992a526eee
google.golang.org/grpc@v1.76.0
1.82.2

Open the chart page →

1,319
sabliersablier-helm-chartsOfficialVerified publisher1.8.11 of 1See more

sablier sablier-helm-charts 1.8.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
sablierapp/sablier:1.16.1413704376656
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

162
seaweedfs-csi-driverseaweedfs-csi-driver0.2.387 of 7See more

seaweedfs-csi-driver seaweedfs-csi-driver 0.2.38

7 of the 7 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
chrislusf/seaweedfs-csi-driver:v1.4.32570605bc413c
google.golang.org/grpc@v1.85.0-dev
1.85.0-dev.0.20260825072537-93e31b48545e
chrislusf/seaweedfs-mount:v1.4.32c97e6f49e90c
google.golang.org/grpc@v1.85.0-dev
1.85.0-dev.0.20260825072537-93e31b48545e
registry.k8s.io/sig-storage/csi-attacher:v4.3.04eb73137b663
google.golang.org/grpc@v1.54.0
1.82.2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0f6717ce72a26
google.golang.org/grpc@v1.54.0
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
google.golang.org/grpc@v1.54.0
1.82.2
registry.k8s.io/sig-storage/csi-resizer:v1.8.02e2b44393539
google.golang.org/grpc@v1.51.0
1.82.2
registry.k8s.io/sig-storage/livenessprobe:v2.10.04dc0b87ccd69
google.golang.org/grpc@v1.51.0
1.82.2

Open the chart page →

5,321
bentoself-hosters-by-nightVerified publisher0.9.11 of 1See more

bento self-hosters-by-night 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/warpstreamlabs/bento:1.8.121715979aefa
google.golang.org/grpc@v1.70.0
1.82.2

Open the chart page →

1,177
corednssoftizyVerified publisher0.2.01 of 1See more

coredns softizy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
coredns/coredns:1.10.1a0ead06651cf
google.golang.org/grpc@v1.52.3
1.82.2

Open the chart page →

1,696
knative-servingsoftonic3.0.05 of 5See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned873b968f02b5
google.golang.org/grpc@v1.28.1
1.82.2
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinneda5de0fb75046
google.golang.org/grpc@v1.28.0
1.82.2
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned2ef460356b17
google.golang.org/grpc@v1.28.1
1.82.2
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned30ce73388ae5
google.golang.org/grpc@v1.28.1
1.82.2
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinnedf16c0e022203
google.golang.org/grpc@v1.28.1
1.82.2

Open the chart page →

12,537
miniosolidchartsVerified publisher0.5.01 of 1See more

minio solidcharts 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/coollabsio/minio:RELEASE.2025-10-15T17-29-55Z69b55a1c1c5d
google.golang.org/grpc@v1.71.0
1.82.2

Open the chart page →

1,187
ingressmonitorcontrollerstakaterVerified publisher2.2.131 of 1See more

ingressmonitorcontroller stakater 2.2.13

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/stakater/ingressmonitorcontroller:v2.2.133301afb61c10
google.golang.org/grpc@v1.67.1
1.82.2

Open the chart page →

590
sn-platformstreamnative1.11.443 of 9See more

sn-platform streamnative 1.11.44

3 of the 9 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
google.golang.org/grpc@v1.45.0
1.82.2
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
google.golang.org/grpc@v1.44.0
1.82.2
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
google.golang.org/grpc@v1.53.0
1.82.2

Open the chart page →

67,666
feedbacksystemthm-mni-iiVerified publisher0.47.13 of 10See more

feedbacksystem thm-mni-ii 0.47.1

3 of the 10 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2023.12.23-debian-11-r25bb0aa825d16
google.golang.org/grpc@v1.60.1
1.82.2
library/docker:20.10.21-dind3153fa63f546
google.golang.org/grpc@v1.47.0
1.82.2
thmmniii/fbs-runner:v1.27.186105349c1a3
google.golang.org/grpc@v1.53.0
1.82.2

Open the chart page →

28,836
topaztopaz0.2.51 of 1See more

topaz topaz 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
google.golang.org/grpc@v1.71.1
1.82.2

Open the chart page →

1,674
maeshtraefikOfficialVerified publisher2.1.21 of 7See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
containous/maesh:v1.3.2587162516502
google.golang.org/grpc@v1.27.1
1.82.2

Open the chart page →

4,145
traefik-meshtraefikOfficialVerified publisher4.1.12 of 7See more

traefik-mesh traefik 4.1.1

2 of the 7 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.18db45c07f2e1b
google.golang.org/grpc@v1.27.1
1.82.2
library/traefik:v2.57d5a6ae66572
google.golang.org/grpc@v1.38.0
1.82.2

Open the chart page →

9,289
argocdtwomartensVerified publisher0.1.12 of 3See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
google.golang.org/grpc@v1.56.1
1.82.2
quay.io/argoproj/argocd:v2.8.6acaf37352569
google.golang.org/grpc@v1.58.3
1.82.2

Open the chart page →

10,418
uptraceuptrace2.0.21 of 2See more

uptrace uptrace 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
uptrace/uptrace:2.0.234a02c3b2d12
google.golang.org/grpc@v1.73.0
1.82.2

Open the chart page →

1,749
valkey-operatorvalkeyVerified publisher0.6.01 of 1See more

valkey-operator valkey 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/valkey-io/valkey-operator:v0.6.052a0f1ed0c03
google.golang.org/grpc@v1.79.3
1.82.2

Open the chart page →

148
vaultvaultVerified publisher1.22.03 of 4See more

vault vault 1.22.0

3 of the 4 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
alpine/k8s:1.35.5d870622d0040
google.golang.org/grpc@v1.80.0
1.82.2
hashicorp/vault:2.0.1755355002715
google.golang.org/grpc@v1.81.0
1.82.2
ghcr.io/bank-vaults/bank-vaults:v1.33.198b6ea2ed319
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

4,293
vsphere-cpivsphere-tmm1.6.01 of 1See more

vsphere-cpi vsphere-tmm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.28.0026f63d9ed42
google.golang.org/grpc@v1.54.0
1.82.2

Open the chart page →

1,358
argo-cdwenerme10.9.22 of 3See more

argo-cd wenerme 10.9.2

2 of the 3 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
google.golang.org/grpc@v1.79.1
1.82.2
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
google.golang.org/grpc@v1.81.1
1.82.2

Open the chart page →

3,032
daprwenerme1.18.45 of 5See more

dapr wenerme 1.18.4

5 of the 5 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/dapr/injector:1.18.45ac0db7ca106
google.golang.org/grpc@v1.82.1
1.82.2
ghcr.io/dapr/operator:1.18.4af58fae3e7c9
google.golang.org/grpc@v1.82.1
1.82.2
ghcr.io/dapr/placement:1.18.490d2293f42a3
google.golang.org/grpc@v1.82.1
1.82.2
ghcr.io/dapr/scheduler:1.18.4239eac864320
google.golang.org/grpc@v1.82.1
1.82.2
ghcr.io/dapr/sentry:1.18.405286fc952e7
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

225
wharf-helmwharf-helmOfficialVerified publisher3.2.62 of 5See more

wharf-helm wharf-helm 3.2.6

2 of the 5 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
google.golang.org/grpc@v1.44.0
1.82.2
quay.io/iver-wharf/wharf-provider-gitlab:v2.0.1d7079e0890da
google.golang.org/grpc@v1.44.0
1.82.2

Open the chart page →

10,048
buildkitdwiremindVerified publisher0.33.01 of 1See more

buildkitd wiremind 0.33.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
moby/buildkit:v0.32.2-rootless504731e577c2
google.golang.org/grpc@v1.82.1
1.82.2

Open the chart page →

1,164
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
google.golang.org/grpc@v1.45.0
1.82.2

Open the chart page →

4,050
kubernetes-etcd-backupadfinisVerified publisher1.6.21 of 1See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
google.golang.org/grpc@v1.59.0
1.82.2

Open the chart page →

1,875
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
google.golang.org/grpc@v1.83.0
1.83.2

Open the chart page →

20,339
agentareaagentareaVerified publisher0.0.185 of 16See more

agentarea agentarea 0.0.18

5 of the 16 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
agentarea/agentarea-mcp-manager:latestefe23cef3727
google.golang.org/grpc@v1.82.1
1.82.2
openfga/openfga:v1.18.036097b960f66
google.golang.org/grpc@v1.81.1
1.82.2
oryd/kratos:v1.3.1fe2428f103a6
google.golang.org/grpc@v1.65.0
1.82.2
temporalio/auto-setup:1.29.15b3502a3b685
google.golang.org/grpc@v1.72.2
1.82.2
temporalio/ui:2.39.0b768f87f18b5
google.golang.org/grpc@v1.66.0
1.82.2

Open the chart page →

15,295
cloudflaredalekcVerified publisher1.8.11 of 1See more

cloudflared alekc 1.8.1

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.9.1b269e8abd07a
google.golang.org/grpc@v1.83.0
1.83.2

Open the chart page →

353
alertmanager-matrixalertmanager-matrixVerified publisher0.1.161 of 1See more

alertmanager-matrix alertmanager-matrix 0.1.16

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
silkeh/alertmanager_matrix:0.6.1900010497f8c
google.golang.org/grpc@v1.78.0
1.82.2

Open the chart page →

471
clearml-servingallegroaiVerified publisher1.6.22 of 9See more

clearml-serving allegroai 1.6.2

2 of the 9 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
grafana/grafana:9.4.376dcf36e7d2a
google.golang.org/grpc@v1.45.0
1.82.2
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
google.golang.org/grpc@v1.51.0
1.82.2

Open the chart page →

17,923
cloudflare-operatorankra-chartsVerified publisher0.2.01 of 1See more

cloudflare-operator ankra-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
adyanth/cloudflare-operatordigest-pinned6b168dc237d5
google.golang.org/grpc@v1.72.0
1.82.2

Open the chart page →

507
upcloud-csiankra-chartsVerified publisher0.4.07 of 8See more

upcloud-csi ankra-charts 0.4.0

7 of the 8 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
google.golang.org/grpc@v1.74.2
1.82.2
ghcr.io/upcloudltd/upcloud-csidigest-pinned5af91c663788
google.golang.org/grpc@v1.79.3
1.82.2
registry.k8s.io/sig-storage/csi-attacher:v3.4.08b9c313c05f5
google.golang.org/grpc@v1.40.0
1.82.2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.5.04fd21f36075b
google.golang.org/grpc@v1.40.0
1.82.2
registry.k8s.io/sig-storage/csi-provisioner:v3.1.0122bfb8c1eda
google.golang.org/grpc@v1.40.0
1.82.2
registry.k8s.io/sig-storage/csi-resizer:v1.4.09ebbf9f023e7
google.golang.org/grpc@v1.40.0
1.82.2
registry.k8s.io/sig-storage/csi-snapshotter:v4.2.1818f35653f2e
google.golang.org/grpc@v1.38.0
1.82.2

Open the chart page →

15,002
alazanteonVerified publisher0.12.01 of 1See more

alaz anteon 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ddosify/alaz:v0.12.0ea602056d9ce
google.golang.org/grpc@v1.59.0
1.82.2

Open the chart page →

3,429
anteonanteonVerified publisher2.6.43 of 13See more

anteon anteon 2.6.4

3 of the 13 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
chrislusf/seaweedfs:3.64634b094b2183
google.golang.org/grpc@v1.61.1
1.82.2
library/influxdb:2.6.1-alpine44a366dd7724
google.golang.org/grpc@v1.47.0
1.82.2
prom/prometheus:v2.37.98176adea328e
google.golang.org/grpc@v1.47.0
1.82.2

Open the chart page →

22,605
antreaantreaVerified publisher2.7.02 of 2See more

antrea antrea 2.7.0

2 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
antrea/antrea-agent-ubuntu:v2.7.0c10bc45c6272
google.golang.org/grpc@v1.83.0
1.83.2
antrea/antrea-controller-ubuntu:v2.7.0f1373d39217c
google.golang.org/grpc@v1.83.0
1.83.2

Open the chart page →

3,687
api-usage-serverapi-usage-server1.16.01 of 1See more

api-usage-server api-usage-server 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/api-usage-server:1.16.08f9c32b866b0
google.golang.org/grpc@v1.67.1
1.82.2

Open the chart page →

740
gateway-helmappscodeVerified publisher0.0.0-latest1 of 2See more

gateway-helm appscode 0.0.0-latest

1 of the 2 container images this version deploys carry CVE-2026-84445.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/gateway:v0.0.1a8a144f14889
google.golang.org/grpc@v1.54.0
1.82.2

Open the chart page →

1,096

Container images carrying it

2,803 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
google.golang.org/grpc@v1.79.3
1.82.2
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
google.golang.org/grpc@v1.71.0
1.82.2
1
registry.k8s.io/sig-storage/objectstorage-sidecar:v0.2.2c7166a73a303
google.golang.org/grpc@v1.74.2
1.82.2
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.